$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft File: 4e84d19a-da77-4951-9413-0914c81e76e1.mft (raw, json) Hash identifier: KuEJ3cjTYwUGtFT2j4fgOK/aOwp3MvW8SCvzLxnGotU= Subject key identifier: D2:0F:FA:A7:0D:5C:E2:35:68:A0:4B:A1:68:36:E6:BA:F4:74:2F:C2 Authority key identifier: C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 Certificate issuer: /CN=4e84d19a-da77-4951-9413-0914c81e76e1 Certificate serial: 010D0C9F4328584D4A35F40FEDD1EB7DDE481640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft Manifest number: 010D0C9F43285848D747B47D9F75BCF18E54CCE2 Signing time: Wed 25 Mar 2026 22:00:04 +0000 Manifest this update: Wed 25 Mar 2026 22:00:04 +0000 Manifest next update: Sat 28 Mar 2026 22:00:00 +0000 Files and hashes: 1: 387f6db0-20d1-3de5-86c6-570f32283f2a.roa (hash: 30yc1vK1jWqQBRc9mZXs4G4ONW+hDmQYRZhP43ikoH4=) 2: 4e84d19a-da77-4951-9413-0914c81e76e1.crl (hash: MpRZYilYIl1zxJVAP2emY1eMH6t03FkX/ZjZzTe5Q7g=) 3: 829121bb-ad6c-3bdb-a8a4-eba4a2b950e5.roa (hash: 0+wrhljr2NiTeetNyAN3lzvAR2UMIqUdu6REwL8R/YE=) 4: f03671be-0e2c-3c3a-8be5-263749fffc37.roa (hash: ewVVR7pKBP7LECGRIuShOGHUbcMXC8bnbv2woZb58FM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:35:f4:0f:ed:d1:eb:7d:de:48:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e84d19a-da77-4951-9413-0914c81e76e1 Validity Not Before: Mar 25 22:00:04 2026 GMT Not After : Mar 28 22:00:00 2026 GMT Subject: CN=84eaa5e6-353b-4929-ba14-f59a710efa5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:07:f4:ae:fa:05:97:18:ce:69:d8:8a:5c:32: 17:46:3a:ae:1c:12:36:dc:16:be:c4:64:22:e8:30: 3d:36:1d:c2:6e:a2:b9:f3:1e:e3:51:7b:87:96:4c: 86:fb:ba:b4:8a:cd:85:86:cb:c1:87:c0:7c:77:2c: 13:09:d3:50:64:aa:5b:84:18:6d:fe:30:94:9d:78: 05:91:2d:00:79:76:d4:39:bc:67:97:1b:6d:bd:ac: 8b:72:11:f2:07:6e:09:98:5e:6a:b5:26:df:ad:6b: 5b:8d:ce:90:a8:03:6d:bb:ba:80:fa:ac:ab:06:02: 26:3c:0b:0a:19:93:06:67:f4:f2:46:11:e7:43:b1: 81:f7:a3:f9:84:4d:b5:16:b8:be:2e:05:ea:48:ec: 7c:14:22:f4:53:a4:98:4d:77:70:ab:f7:5b:09:6d: 09:e2:f6:b2:03:0c:bb:0a:b5:d6:3e:0d:54:3a:e4: ac:be:8a:5e:8b:5a:c3:81:ad:1d:50:ff:3e:39:4f: 98:b5:f4:0c:3a:82:b5:87:24:13:ab:0e:d8:5f:a0: 53:ea:a0:4f:03:6c:65:58:85:c8:0a:43:9b:36:74: 1f:fa:2f:9e:08:c0:c0:cf:d4:2a:85:4d:76:c5:63: cf:da:7b:d5:86:f0:cb:fa:51:d0:8d:12:28:3d:d2: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0F:FA:A7:0D:5C:E2:35:68:A0:4B:A1:68:36:E6:BA:F4:74:2F:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1/4e84d19a-da77-4951-9413-0914c81e76e1.crl X509v3 Authority Key Identifier: keyid:C7:C9:7C:EF:6D:1F:19:1E:41:FE:17:4C:7E:AF:BB:AE:C9:09:71:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4e84d19a-da77-4951-9413-0914c81e76e1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:16:e3:c0:68:8e:a2:ab:e0:b9:40:6e:20:5a:65:f1:3d:99: e0:f2:8d:8b:72:6a:d2:25:41:5d:5f:83:d0:4b:d4:53:36:6b: f2:36:61:29:fa:d6:5a:c3:3f:d5:cd:0c:8b:34:c0:9f:c9:ec: a1:5a:36:b4:c7:c3:ef:2e:9f:9f:2e:bd:47:15:24:d7:c9:f9: 36:f0:75:e7:86:31:30:eb:fd:4f:03:94:80:ca:fa:96:f8:d3: 82:81:b1:97:53:c0:61:57:ae:9a:ac:9b:3c:e9:21:dd:47:c1: b9:1d:a6:94:1b:e5:80:7a:8e:46:e2:7a:ea:58:1f:88:a6:7b: f2:fa:d6:f4:c9:48:b4:39:b8:b5:ee:7a:4b:1d:3a:2b:2a:d3: 23:c7:4b:83:41:7e:57:f7:01:86:b4:f7:cd:c8:60:a6:03:2b: c7:ce:38:1a:bd:6c:63:5c:1b:4e:d9:99:1c:94:9f:56:a5:ad: d9:23:e0:27:72:63:38:00:6e:77:e6:16:66:97:01:2c:1f:a9: bb:d7:9e:16:cf:c7:eb:bd:cb:d2:74:98:38:4c:4b:ea:38:cb: 1b:a2:02:49:e6:6d:68:ab:20:6d:20:06:5f:6e:00:5e:21:84: 25:d5:84:c4:ff:13:b8:1d:41:6a:18:4e:eb:fb:74:fa:f7:b3: 7b:72:4a:56 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE1KNfQP7dHrfd5IFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4NGQxOWEtZGE3Ny00OTUxLTk0MTMtMDkxNGM4MWU3 NmUxMB4XDTI2MDMyNTIyMDAwNFoXDTI2MDMyODIyMDAwMFowLzEtMCsGA1UEAxMk ODRlYWE1ZTYtMzUzYi00OTI5LWJhMTQtZjU5YTcxMGVmYTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Qf0rvoFlxjOadiKXDIXRjquHBI23Ba+xGQi 6DA9Nh3CbqK58x7jUXuHlkyG+7q0is2FhsvBh8B8dywTCdNQZKpbhBht/jCUnXgF kS0AeXbUObxnlxttvayLchHyB24JmF5qtSbfrWtbjc6QqANtu7qA+qyrBgImPAsK GZMGZ/TyRhHnQ7GB96P5hE21Fri+LgXqSOx8FCL0U6SYTXdwq/dbCW0J4vayAwy7 CrXWPg1UOuSsvopei1rDga0dUP8+OU+YtfQMOoK1hyQTqw7YX6BT6qBPA2xlWIXI CkObNnQf+i+eCMDAz9QqhU12xWPP2nvVhvDL+lHQjRIoPdI0kQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNIP+qcNXOI1aKBLoWg25rr0dC/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0 ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0YzgxZTc2ZTEvNGU4NGQxOWEtZGE3Ny00 OTUxLTk0MTMtMDkxNGM4MWU3NmUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNGU4NGQxOWEtZGE3Ny00OTUxLTk0 MTMtMDkxNGM4MWU3NmUxLzRlODRkMTlhLWRhNzctNDk1MS05NDEzLTA5MTRjODFl NzZlMS5jcmwwHwYDVR0jBBgwFoAUx8l8720fGR5B/hdMfq+7rskJcVgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80ZTg0ZDE5YS1kYTc3LTQ5NTEtOTQxMy0wOTE0 YzgxZTc2ZTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXFuPAaI6iq+C5QG4gWmXx PZng8o2LcmrSJUFdX4PQS9RTNmvyNmEp+tZawz/VzQyLNMCfyeyhWja0x8PvLp+f Lr1HFSTXyfk28HXnhjEw6/1PA5SAyvqW+NOCgbGXU8BhV66arJs86SHdR8G5HaaU G+WAeo5G4nrqWB+Ipnvy+tb0yUi0Obi17npLHTorKtMjx0uDQX5X9wGGtPfNyGCm AyvHzjgavWxjXBtO2ZkclJ9Wpa3ZI+AncmM4AG535hZmlwEsH6m7154Wz8frvcvS dJg4TEvqOMsbogJJ5m1oqyBtIAZfbgBeIYQl1YTE/xO4HUFqGE7r+3T697N7ckpW -----END CERTIFICATE-----Generated at Thu Mar 26 03:32:59 2026 by rpki-client